$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5e589470-4552-3d4a-9880-59e2ad80d78f.roa File: 5e589470-4552-3d4a-9880-59e2ad80d78f.roa (raw, json) Hash identifier: K6qcDbnZFtjBRISVT9YFxZlXVwvTX5Y0bM0FBCwnr2I= Subject key identifier: E4:E2:BF:99:ED:57:14:33:B6:DC:79:AE:AE:AD:E1:65:B6:62:1C:46 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B9703962C6ECF611586FA1C80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5e589470-4552-3d4a-9880-59e2ad80d78f.roa Signing time: Tue 21 Oct 2025 00:41:59 +0000 ROA not before: Tue 21 Oct 2025 00:41:59 +0000 ROA not after: Mon 19 Jan 2026 01:41:59 +0000 asID: 174 IP address blocks: 74.1.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:03:96:2c:6e:cf:61:15:86:fa:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 21 00:41:59 2025 GMT Not After : Jan 19 01:41:59 2026 GMT Subject: CN=48ddf7d7-7d87-4e4a-8374-e45e074d1b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:64:98:6b:1a:e3:67:80:c9:83:aa:79:a5:4d: ab:aa:e9:ea:d7:76:15:75:90:38:16:f8:23:93:95: 6d:bf:cd:ce:11:82:61:77:0b:35:f7:85:c7:61:8a: 09:65:72:8d:32:8d:f2:a1:bf:b9:cd:11:9f:74:33: 48:fb:3b:b8:75:74:0f:2f:42:4e:21:4a:e1:ae:00: 69:19:4d:dc:0f:12:50:40:b7:d9:26:d9:18:68:b5: 0b:1f:4a:55:a2:eb:d6:59:c1:9d:7a:ea:3f:2c:32: 48:8d:f6:a9:33:fe:41:d2:19:36:80:48:fc:28:a4: fd:cc:5d:6c:c9:7b:a0:b4:08:62:42:4b:bd:c1:63: de:c2:cb:f4:f4:69:23:05:68:05:cf:49:f4:42:c3: 7b:66:06:9e:96:cf:74:c0:93:1e:fd:67:79:86:47: d1:07:39:13:84:54:33:af:57:22:ee:d9:59:a6:87: c5:e8:47:d1:0b:06:56:3b:3e:98:56:7d:d0:71:30: 8f:e3:93:f1:00:7e:7e:c4:a9:3d:f3:8b:a7:e1:eb: 84:02:e6:86:a6:16:19:a1:e6:36:02:0b:fd:7e:fd: b7:0d:a8:5b:d1:08:b5:cd:e3:44:62:b7:1e:4b:40: e3:8c:9d:5e:d9:6a:c0:bd:49:93:80:85:ca:a5:e5: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E2:BF:99:ED:57:14:33:B6:DC:79:AE:AE:AD:E1:65:B6:62:1C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5e589470-4552-3d4a-9880-59e2ad80d78f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8c:05:fe:46:7d:4b:04:92:45:92:e6:e2:48:26:41:df:35: 2c:5d:7e:84:69:69:45:8e:c4:93:3c:ba:f4:20:1f:3e:1c:d6: b2:f7:02:69:fa:e7:fa:81:6e:94:49:dc:89:91:21:cc:4d:b6: b6:99:63:81:04:db:0e:2f:78:7e:c0:67:57:19:80:19:45:28: 35:1e:b9:c0:49:df:82:d0:b3:71:40:48:6f:eb:14:55:f6:db: 43:02:de:0c:18:5b:d8:e1:22:84:ef:43:90:bc:0c:f9:42:24: 30:31:52:6a:85:94:ad:fc:20:30:38:25:ab:b4:e9:6e:6d:72: 98:24:c7:13:2d:3f:82:e2:f7:d8:19:d9:d8:4b:0c:66:92:16: 06:96:d8:a1:14:81:f7:ea:76:c0:15:93:57:7b:ca:f0:f8:79: a8:9f:d9:3b:1b:9e:26:02:d7:05:0f:f0:ef:11:24:1c:e1:1a: 9e:0f:6f:fb:85:1c:91:da:de:20:4e:8f:16:eb:8b:39:b1:31: 36:40:c6:9d:d0:56:62:e5:40:02:38:50:53:ac:64:67:f6:6f: d6:4f:f3:10:fe:e2:96:9d:ad:0a:d3:14:c6:98:81:2e:4e:54: 7b:8e:0e:24:0e:90:4d:6c:00:bf:39:bc:44:26:c9:ce:36:af: 52:3a:20:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXA5Ysbs9hFYb6HIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMTAwNDE1OVoXDTI2MDExOTAxNDE1OVowLzEtMCsGA1UEAxMk NDhkZGY3ZDctN2Q4Ny00ZTRhLTgzNzQtZTQ1ZTA3NGQxYjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWSYaxrjZ4DJg6p5pU2rqunq13YVdZA4Fvgj k5Vtv83OEYJhdws194XHYYoJZXKNMo3yob+5zRGfdDNI+zu4dXQPL0JOIUrhrgBp GU3cDxJQQLfZJtkYaLULH0pVouvWWcGdeuo/LDJIjfapM/5B0hk2gEj8KKT9zF1s yXugtAhiQku9wWPewsv09GkjBWgFz0n0QsN7Zgaels90wJMe/Wd5hkfRBzkThFQz r1ci7tlZpofF6EfRCwZWOz6YVn3QcTCP45PxAH5+xKk984un4euEAuaGphYZoeY2 Agv9fv23Dahb0Qi1zeNEYrceS0DjjJ1e2WrAvUmTgIXKpeWwlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTiv5ntVxQzttx5rq6t4WW2YhxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWU1ODk0NzAtNDU1Mi0z ZDRhLTk4ODAtNTllMmFkODBkNzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqMBf5GfUsEkkWS5uJIJkHfNSxdfoRpaUWOxJM8uvQgHz4c1rL3Amn6 5/qBbpRJ3ImRIcxNtraZY4EE2w4veH7AZ1cZgBlFKDUeucBJ34LQs3FASG/rFFX2 20MC3gwYW9jhIoTvQ5C8DPlCJDAxUmqFlK38IDA4Jau06W5tcpgkxxMtP4Li99gZ 2dhLDGaSFgaW2KEUgffqdsAVk1d7yvD4eaif2TsbniYC1wUP8O8RJBzhGp4Pb/uF HJHa3iBOjxbrizmxMTZAxp3QVmLlQAI4UFOsZGf2b9ZP8xD+4padrQrTFMaYgS5O VHuODiQOkE1sAL85vEQmyc42r1I6IKM= -----END CERTIFICATE-----Generated at Wed Nov 5 00:09:41 2025 by rpki-client